to prevent CSRF I want to implement the Synchronizer Token Pattern in my classic asp application.
I understand that iIshould generate a token in session_onstart. Wh
You could use a GUID as token:-
Function GetGUID() GetGUID = CreateObject("Scriptlet.TypeLib").GUID End Function